server {
  listen        80;
  listen        [::]:80;
  return        307     http://781.partidopirata.org;
}

server {
  listen        443     ssl;
  listen        [::]:443        ssl;
  ssl_protocols TLSv1   TLSv1.1 TLSv1.2;
  ssl_prefer_server_ciphers     on;
  ssl_ciphers   "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
  ssl_ecdh_curve        secp384r1;
  ssl_session_cache     shared:SSL:10m;
  ssl_session_tickets   off;
  ssl_stapling  on;
  ssl_stapling_verify   on;
  resolver      208.67.220.220  208.67.222.222  valid=300s;
  resolver_timeout      5s;
  add_header    Strict-Transport-Security       "max-age=63072000; includeSubdomains; preload";
  add_header    X-Frame-Options SAMEORIGIN;
  add_header    X-Content-Type-Options nosniff;
  ssl_certificate       /etc/letsencrypt/live/partidopirata.org/fullchain.pem;
  ssl_certificate_key   /etc/letsencrypt/live/partidopirata.org/privkey.pem;
  ssl_trusted_certificate       /etc/letsencrypt/live/partidopirata.org/chain.pem;
  return        307     https://781.partidopirata.org;
}

